Last updated: June 2026
1. Data controller
The data controller is La Mora Affittacamere, based at Piazza Municipio 10, 06069 Tuoro sul Trasimeno (PG), reachable by phone at 388 380 9792 (also WhatsApp) and by email at lamora.affittacamere@gmail.com.
2. What data we process and why
a) Enquiries and bookings
The data you provide for enquiries and bookings (name, contact details, dates) is used only to manage the booking and stay. For online payment, card data is handled exclusively by the certified gateway Stripe/PayPal: card details do not pass through this site. Legal basis: pre-contractual and contractual measures (Art. 6.1.b GDPR).
b) WhatsApp, email and contact form
Messages sent via WhatsApp, email or the Contact form are used only to reply to you. Legal basis: pre-contractual measures requested by the data subject (Art. 6.1.b GDPR).
c) Legal obligations for guests
For an actual stay we are required to register ID document data and report it to the Police via «Alloggiati Web» (Art. 109 TULPS), plus ISTAT statistics. Legal basis: legal obligation (Art. 6.1.c GDPR).
d) Navigation data
The hosting provider records technical logs such as the IP address, for security and operation. Legal basis: legitimate interest (Art. 6.1.f GDPR).
3. Recipients
Data is not sold or shared for marketing. It may be processed by: the payment gateways Stripe Payments Europe Ltd (Dublin, EU) and possibly PayPal (Europe) S.à.r.l., for payments made from the «Pay for your stay» page; public security authorities (legal obligation); the hosting provider; Meta (if you use WhatsApp); Google (map and fonts loaded from its servers). Bookings via Booking.com or Airbnb are governed by those portals' policies.
4. Retention
Enquiries with no follow-up are deleted within 12 months. Data for actual stays is kept for the period required by tax and public-security obligations (up to 10 years for tax documents).
5. Your rights
You may exercise the rights under Arts. 15–22 GDPR (access, rectification, erasure, restriction, portability, objection) by writing to the contacts in point 1. You may also contact the Italian Data Protection Authority.
6. Minors
The site is not intended for children under 14 and does not knowingly collect their data.